ML-KEM-768 · FIPS-203 service…

Lock your secrets against the quantum age.

Store documents, private keys and sensitive data encrypted with ML-KEM-768 (NIST FIPS-203) key encapsulation + AES-256-GCM. Only the holder of the secret key can ever open it — immune to quantum computers.

The plaintext is never stored. The vault keeps only the ciphertext. Lose the key, and the data is mathematically irrecoverable — by design.

Items sealed
Vault owners
ML-KEM-768Key encapsulation
AES-256-GCMContent cipher

Live demo — encrypt, store, recover, and prove the lock

🔐 Quantum Vault — real cryptography, live

ML-KEM-768 + AES-256-GCM
1 · generate key 2 · encrypt & store 3 · recover (right key) 4 · impostor rejected
Press “Run” to generate a post-quantum key, encrypt this secret, store the ciphertext, recover it with the right key, then watch an impostor key get mathematically rejected.

How it works

🔑

1. Key

ML-KEM-768 keypair. You hold the secret key. The vault only ever sees the public key.

🔒

2. Encapsulate

A random shared secret is encapsulated to your public key (post-quantum) and AES-256-GCM encrypts the content.

🗄️

3. Store

Only the ciphertext, KEM envelope, IV and auth tag are stored. Plaintext never touches disk.

🔓

4. Open

Your secret key decapsulates the shared secret and decrypts. No key = the GCM tag fails = locked forever.

Why quantum-safe matters

❌ Legacy encryption (RSA / ECC)

“Harvest now, decrypt later” — adversaries store your encrypted data today and break it once a quantum computer (Shor's algorithm) arrives. RSA-2048 and ECC fall.

✅ Sovereign Quantum Vault

ML-KEM-768 is a NIST-standardized lattice scheme (FIPS-203) with no known quantum attack. Combined with AES-256 (Grover-resistant at this size), your secrets stay sealed for decades.

Plans — paid in the sovereign rail (WUSD 1:1)

Personal

$19/mo
  • Post-quantum encrypted storage
  • 5 GB sealed content
  • ML-KEM-768 + AES-256-GCM
  • Client-held secret key
  • Integrity verification (SHA-256)

Business

$499/mo
  • Everything in Personal
  • 100 GB + team keys
  • Full REST API access
  • Bulk store/retrieve
  • Priority support

Prices live in sovereign_service_prices, charged by /api/pay/service (WUSD, 1:1). Open-source, on our own node, zero third parties.